About the security content of iOS 17.4.1 and iPadOS 17.4.1

About the security content of iOS 17.4.1 and iPadOS 17.4.1 This document describes the security content of iOS 17.4.1 and iPadOS 17.4.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

CVE-2024-26182

creationtimestamp| type| source ---|---|--- 2024-03-12 20:21:51+00:00| seen| https://t.me/ctinow/206088 2024-04-11 18:07:51+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10314 2024-04-18 16:45:00+00:00| seen|...

CVE-2024-26181

creationtimestamp| type| source ---|---|--- 2024-03-12 20:21:50+00:00| seen| https://t.me/ctinow/206087 2024-04-18 16:45:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/04/the-windows-registry-adventure-1.html 2024-10-25 17:30:00+00:00| seen|...

CVE-2024-26178

creationtimestamp| type| source ---|---|--- 2024-03-12 20:21:49+00:00| seen| https://t.me/ctinow/206086 2024-04-18 16:45:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/04/the-windows-registry-adventure-1.html 2024-12-19 18:03:00+00:00| seen|...

CVE-2024-26173

creationtimestamp| type| source ---|---|--- 2024-03-12 20:21:47+00:00| seen| https://t.me/ctinow/206084 2024-04-18 16:45:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/04/the-windows-registry-adventure-1.html 2024-12-19 18:03:00+00:00| seen|...

CVE-2024-26174

creationtimestamp| type| source ---|---|--- 2024-03-12 20:21:43+00:00| seen| https://t.me/ctinow/206080 2024-04-18 16:45:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/04/the-windows-registry-adventure-1.html 2025-05-03 01:18:23+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1466...

CVE-2024-1580

creationtimestamp| type| source ---|---|--- 2024-02-19 12:21:31+00:00| seen| https://t.me/ctinow/187611 2024-02-19 12:31:31+00:00| seen| https://t.me/ctinow/187616 2024-02-20 18:50:27+00:00| seen| https://t.me/arpsyndicate/3672 2024-03-08 10:22:18+00:00| seen| https://t.me/ctinow/203202 2024-03-1...

CVE-2023-41772

creationtimestamp| type| source ---|---|--- 2023-12-20 11:00:39+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9620 2023-12-21 07:50:20+00:00| published-proof-of-concept| https://t.me/CNArsenal/1733 2023-12-21 13:21:00+00:00| exploited| https://t.me/LearnExploit/5792...

Qualcomm Releases Details on Chip Vulnerabilities Exploited in Targeted Attacks

Chipmaker Qualcomm has released more information about three high-severity security flaws that it said came under "limited, targeted exploitation" back in October 2023. The vulnerabilities are as follows - CVE-2023-33063 CVSS score: 7.8 - Memory corruption in DSP Services during a remote call fro...

CVE-2023-32837

creationtimestamp| type| source ---|---|--- 2023-11-06 07:30:38+00:00| seen| https://t.me/cibsecurity/73569 2024-06-13 18:03:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/06/driving-forward-in-android-drivers.html 2025-04-25 16:07:11+00:00| published-proof-of-concept|...

Exploit for Use After Free in Microsoft

PoC for CVE-2023-36802 Exploit targeting MSKSSRV.SYS driver. T...

CVE-2023-36803

creationtimestamp| type| source ---|---|--- 2023-10-20 11:06:20+00:00| seen| https://t.me/CyberSecurityTechnologies/9230 2024-04-18 16:45:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/04/the-windows-registry-adventure-1.html 2025-05-23 05:00:00+00:00| seen|...

CVE-2023-38139

creationtimestamp| type| source ---|---|--- 2023-09-12 20:29:16+00:00| seen| https://t.me/cibsecurity/70325 2023-10-01 12:50:40+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9121 2024-04-18 16:45:00+00:00| seen|...

CVE-2023-38140

creationtimestamp| type| source ---|---|--- 2023-09-12 20:29:06+00:00| seen| https://t.me/cibsecurity/70316 2023-10-25 11:00:44+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9257 2024-04-18 16:45:00+00:00| seen|...

CVE-2023-38141

creationtimestamp| type| source ---|---|--- 2023-09-12 20:23:05+00:00| seen| https://t.me/cibsecurity/70298 2024-04-18 16:45:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/04/the-windows-registry-adventure-1.html 2025-05-23 05:00:00+00:00| seen|...

CVE-2023-41064

creationtimestamp| type| source ---|---|--- 2023-09-07 22:32:13+00:00| exploited| https://t.me/jokerplstaeen/20570 2023-09-08 06:02:37+00:00| seen| https://t.me/KomunitiSiber/759 2023-09-08 06:26:46+00:00| exploited| Telegram/YlBYivEQ-qOvZcAExbuWqslZFb-ixH5oBNk5I-ay8Dalg 2023-09-08 08:22:02+00:00...

CVE-2023-35386

creationtimestamp| type| source ---|---|--- 2023-08-08 22:14:26+00:00| seen| https://t.me/cibsecurity/68028 2024-04-18 16:45:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/04/the-windows-registry-adventure-1.html 2024-12-19 18:03:00+00:00| seen|...

Summary: MTE As Implemented

By Mark Brand, Project Zero In mid-2022, Project Zero was provided with access to pre-production hardware implementing the ARM MTE specification. This blog post series is based on that review, and includes general conclusions about the effectiveness of MTE as implemented, specifically in the...

chromium -- multiple vulnerabilities

Chrome Releases reports: This update includes 17 security fixes: 1466183 High CVE-2023-4068: Type Confusion in V8. Reported by Jerry on 2023-07-20 1465326 High CVE-2023-4069: Type Confusion in V8. Reported by Man Yue Mo of GitHub Security Lab on 2023-07-17 1462951 High CVE-2023-4070: Type Confusi...

CISA Flags 8 Actively Exploited Flaws in Samsung and D-Link Devices

The U.S. Cybersecurity and Infrastructure Security Agency CISA has placed a set of eight flaws to the Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. This includes six shortcomings affecting Samsung smartphones and two vulnerabilities impacting D-Link device...